Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/PsgRI_SlDc3pZkxr97At1vTEiv8.roa
File: PsgRI_SlDc3pZkxr97At1vTEiv8.roa (raw, json)
Hash identifier: mLZxNDV9/Z19O+BGj3pUZtXjipi4Oxas3q56gHZufG8=
Subject key identifier: 3E:C8:11:23:F4:A5:0D:CD:E9:66:4C:6B:F7:B0:2D:D6:F4:C4:8A:FF
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F94F6E177141796F5A6B69372F76A
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/PsgRI_SlDc3pZkxr97At1vTEiv8.roa
Signing time: Tue 02 Jan 2024 04:30:04 +0000
ROA not before: Tue 02 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59967
IP address blocks: 87.246.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 15:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:94:f6:e1:77:14:17:96:f5:a6:b6:93:72:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec81123f4a50dcde9664c6bf7b02dd6f4c48aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:27:84:f3:2e:85:86:86:40:93:71:84:31:
b5:9c:c2:e2:f5:25:72:64:bc:96:ec:3e:7d:9f:4b:
0c:c3:55:fa:5b:f3:5c:21:ef:b8:7d:b9:bf:3f:17:
f1:15:ba:9d:dd:65:b3:f4:a7:b4:1a:f0:11:69:9e:
9f:c2:4b:c8:61:65:45:15:5d:6e:35:20:13:d2:ce:
77:a9:c8:47:91:81:be:31:72:f9:34:ee:88:5c:41:
e3:cb:df:48:19:9f:05:40:7d:5c:84:c7:56:b0:41:
bd:ec:e8:1b:d3:69:b6:0e:d4:33:28:e8:15:b6:47:
da:b4:f9:51:57:f1:2e:0d:c1:21:87:10:2c:d2:d1:
b2:d4:ce:01:b4:26:b5:15:97:e9:82:a7:50:33:aa:
8c:a3:24:cd:b6:b3:76:3a:47:f2:b9:32:68:93:2d:
c8:46:69:81:ab:6e:61:22:83:63:95:0c:ed:31:cd:
77:d0:70:97:60:40:7f:74:92:97:5a:fe:38:0c:ba:
39:5c:ed:35:93:c3:f3:15:f9:0d:bb:88:93:00:1e:
92:1c:46:ed:58:29:df:18:3b:20:5e:37:f1:ae:eb:
d5:b8:6a:73:b9:9f:ee:44:0c:62:e7:86:83:c4:81:
3c:ea:9c:8b:0e:c3:5d:a0:6c:bb:49:aa:79:b6:b2:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:11:23:F4:A5:0D:CD:E9:66:4C:6B:F7:B0:2D:D6:F4:C4:8A:FF
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/PsgRI_SlDc3pZkxr97At1vTEiv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.163.0/24
Signature Algorithm: sha256WithRSAEncryption
27:db:cf:30:5f:60:a9:3a:64:87:f2:fc:60:9a:bb:ba:b3:a0:
c7:8b:c2:3e:f4:cb:2f:f1:05:0a:2b:aa:af:a3:2e:e3:b4:a4:
d1:85:9b:c2:f1:ee:73:62:81:ac:63:4c:b8:32:c0:7b:bc:7b:
ac:e4:b7:30:6e:c4:0f:22:2b:9f:f1:7e:3f:44:1f:e1:32:03:
4d:10:72:f3:98:a9:21:22:79:4d:25:9b:24:4f:88:a5:59:6c:
44:65:35:1d:af:17:76:f3:53:7b:0c:05:31:42:e4:c7:42:51:
43:a9:7b:44:44:ec:f7:08:0c:35:e6:69:0a:f3:91:6f:49:28:
13:ef:6b:80:e4:1d:84:12:ec:f0:84:51:2a:d2:51:de:da:a3:
9d:68:c5:c1:f1:08:f3:d3:ce:2e:f5:85:ff:98:3b:27:77:76:
20:9c:7d:48:d9:b2:2e:9f:1c:26:13:3f:1e:d1:25:08:32:1c:
fc:d1:8c:03:56:86:14:4f:2f:fd:9b:0c:4d:b3:35:6e:d1:ea:
45:11:cd:60:38:18:c8:87:d2:2c:38:e7:01:34:e7:f6:ac:89:
1b:d0:cb:37:9f:32:16:4a:cb:ba:f0:9d:67:23:36:97:a5:2e:
da:b0:eb:83:34:7c:00:d7:40:77:d2:ce:9b:4c:0d:57:04:67:
63:f0:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 22:12:44 2024 by rpki-client on console-ams.rpki-client.org